=== Watchfox AI ===
Contributors: watchfox
Tags: security, vulnerability, alerts, updates, email
Requires at least: 6.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 0.1.0
License: GPL-2.0-or-later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Emails you, in plain words, when a plugin, theme or WordPress on your site has a known security problem, and tells you what to do.

== Description ==

Watchfox AI keeps an eye on the plugins, themes and WordPress version on your site. When one of them has a known security problem, it tells you in plain words how serious it is and what to do: today, this week, or when you can.

Every finding shows in WordPress on every plan, free included. Paid plans add more email warnings.

What you get:

* A plain page in your WordPress admin that lists what needs doing, with the proof behind each warning.
* An email when something needs you, so you do not have to remember to look.
* Spanish and English.
* It only checks. It never changes your site.

How it works: Watchfox AI downloads a public, signed list of known problems and compares it with the versions on your site. If you sign up for emails, your site sends back only the problems it found, so we can write to you.

== External services ==

Watchfox AI uses four outside services. Nothing is sent to any of them before you finish setup, except the public list download.

1. **api.watchfox.site** (run by the Watchfox AI team, https://watchfox.site). This is the service behind the plugin. Terms: https://watchfox.site/terms. Privacy policy: https://watchfox.site/privacy.
   * Threat list download: your site fetches the public list (an index and small files). Only the files that match what is installed are fetched. The request carries no account or site details, but each file name is a short hash prefix of an installed item, and your server address is visible like in any web request.
   * Site registration: when you finish setup, your site sends the email address and language you chose, your site address, and the Watchfox AI, WordPress and PHP versions, so we can email you.
   * Reports: after each check your site sends only the problems it found (an ID, the item folder name, its version, a status, how serious it is, what kind of item it is and its display name), the IDs of warnings a trusted source has withdrawn, your email and warning settings (including which warnings you muted), and the Watchfox AI, WordPress and PHP versions. It never sends your full list of plugins and themes. Reports are signed with a secret that belongs to your site.
   * Removal: when you delete the plugin, your site tells the service to stop watching it.
   * Emails and payments: when you press "Send it again" or "Send me a sample warning", or choose a paid plan, your site asks the service to send that email or to prepare a payment link (with the plan you picked and your site ID).
2. **Brevo** (https://www.brevo.com), through api.watchfox.site. Brevo delivers our emails (the confirmation, warnings, a sample warning and a weekly all-quiet note) from alerts@watchfox.site. Your email address and the name and address of your site are passed to Brevo only to deliver those emails. Terms: https://www.brevo.com/legal/termsofuse/. Privacy policy: https://www.brevo.com/legal/privacypolicy/.
3. **Dodo Payments** (https://dodopayments.com), only if you choose a paid plan. Your browser opens a Dodo Payments page, the merchant of record, which collects the payment and handles taxes. Card details go only to Dodo Payments, never through your site or Watchfox AI. Cancelling also happens on a Dodo Payments page that the plugin links to. Buyer terms: https://dodopayments.com/legal/buyer-terms. Privacy policy: https://dodopayments.com/legal/privacy-policy.
4. **api.wordpress.org** (https://wordpress.org). Once a day, for a few plugins that WordPress.org used to list but no longer does, your site asks the WordPress.org plugin information API whether the plugin was closed. This sends the plugin folder name and your server address. Terms and privacy: https://wordpress.org/about/privacy/.

The plugin contains no tracking, ads or hidden links.

== Installation ==

1. In WordPress, go to Plugins, then Add New, and search for "Watchfox AI". Or upload the watchfox folder to /wp-content/plugins/.
2. Activate it and open Watchfox in the admin menu.
3. Follow the three setup screens.

== Frequently Asked Questions ==

= What is free? =

All of it, inside WordPress. Every finding, how serious it is, the proof behind it and the steps to fix it show on every plan, free included. A free plan sends warning emails for one site.

= What does a paid plan add? =

More email warnings, for more sites. The warnings you see in WordPress do not change with the plan.

= Does deleting the plugin cancel my plan? =

No. If you pay, cancel from the Plans tab (Manage or cancel) or from any payment email. Deleting the plugin only tells Watchfox AI to stop watching the site.

= Does it change my site? =

No. It only checks and tells you.

= Which languages? =

English and Spanish.

== Screenshots ==

1. The Watchfox page with one warning for today and the proof behind it.
2. The setup screen, where you choose your email and language.
3. Settings, Emails: choose which warnings you want by email.
4. A warning email, as it arrives in Gmail.

== Changelog ==

= 0.1.0 =
* First version.

== Upgrade Notice ==

= 0.1.0 =
First version.
